$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft File: LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft (raw, json) Hash identifier: Ei/KTgV0gLUotY1rjEJpWn3vT5Hu5FT9GE9qixN2/7A= Subject key identifier: 0B:EB:36:BC:62:BC:A0:08:D8:DD:18:F0:18:C8:7E:C1:F6:40:13:92 Authority key identifier: 2D:7C:E9:4F:13:D8:2E:54:F8:34:23:C6:1E:B9:63:3A:F9:40:59:24 Certificate issuer: /CN=A91ABE54/serialNumber=2D7CE94F13D82E54F83423C61EB9633AF9405924 Certificate serial: 04BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXzpTxPYLlT4NCPGHrljOvlAWSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft Manifest number: 04AE Signing time: Sun 01 Mar 2026 00:39:51 +0000 Manifest this update: Sun 01 Mar 2026 00:39:50 +0000 Manifest next update: Sun 08 Mar 2026 00:39:50 +0000 Files and hashes: 1: LXzpTxPYLlT4NCPGHrljOvlAWSQ.crl (hash: x0ZRCL3+2qJ+7BYXmyca3RuFSCh0/r7QEDx1CM+3Zcw=) 2: A69224164EAE11EDBF0D8256C4F9AE02.roa (hash: qx67SY6cbFsDn/Av+gxFXHAz2rKMOBByAtPGn6t9FSc=) 3: A60006804EAE11EDBF0D8256C4F9AE02.roa (hash: 3pXJQr7nPShAPAN+LVcC9TTkocAUC/oyN/9F1ZksrkI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.crl rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXzpTxPYLlT4NCPGHrljOvlAWSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 00:39:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1211 (0x4bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABE54, serialNumber=2D7CE94F13D82E54F83423C61EB9633AF9405924 Validity Not Before: Mar 1 00:39:50 2026 GMT Not After : Mar 8 00:39:50 2026 GMT Subject: CN=69a38ad6-170d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:dc:12:23:32:93:d7:23:78:2e:3c:53:7d:dd: 71:5a:29:e2:bf:19:89:a6:1a:05:87:be:d7:6e:92: a1:82:e7:e3:dc:e6:60:a9:e7:0a:8f:61:a7:17:39: 30:a4:88:0b:cc:b3:4f:14:fa:91:2e:67:6b:89:9e: 10:56:6a:59:67:04:cd:e8:67:90:7d:fb:a2:2e:d7: 9e:91:93:14:73:7c:2b:50:a9:b0:82:f5:16:a3:7d: 1c:1b:31:4b:e5:41:05:8a:37:03:64:93:52:e1:a5: 79:a5:e2:0c:7e:db:9c:1f:4b:a2:16:ff:fd:ed:24: de:91:e2:72:e9:09:0e:cc:12:ee:a0:b2:e3:6a:76: 9b:7b:95:c9:14:e5:d9:39:29:63:98:90:92:73:3b: b9:fb:a2:38:45:ce:dd:dd:1d:d8:0c:1b:9a:58:a2: 44:7d:b2:f5:15:9c:61:ce:78:ed:35:ba:28:df:9d: e8:f6:2b:33:f5:62:05:8c:33:93:2c:0e:f7:86:d3: c7:30:aa:ba:72:07:b9:cd:26:a0:a0:e6:70:73:1f: f4:d4:e3:5c:09:ec:62:d6:c9:55:56:99:9d:7e:61: e8:25:be:2b:9e:ab:36:95:1e:8a:16:38:25:f8:2d: 08:5a:a9:29:b9:0a:a9:a4:ff:cd:53:39:f8:3c:e7: 36:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:EB:36:BC:62:BC:A0:08:D8:DD:18:F0:18:C8:7E:C1:F6:40:13:92 X509v3 Authority Key Identifier: keyid:2D:7C:E9:4F:13:D8:2E:54:F8:34:23:C6:1E:B9:63:3A:F9:40:59:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LXzpTxPYLlT4NCPGHrljOvlAWSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABE54/A5C150AC68D611ECBCD63C54C4F9AE02/LXzpTxPYLlT4NCPGHrljOvlAWSQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:01:ec:a7:85:35:f2:e3:6c:b6:cb:c4:e7:f8:84:12:b5:07: 5f:fb:51:56:33:1a:d1:e5:b5:10:8b:5a:bd:4e:66:d6:27:83: b9:83:5a:c6:bf:4f:cf:ef:98:a4:44:1a:eb:f1:16:6e:08:ca: 9e:e8:be:aa:95:f3:22:72:a6:c3:9f:cf:61:0f:fc:84:00:96: 1c:88:d1:bb:2a:52:4e:6c:78:66:54:35:94:92:cc:55:1e:b7: e5:a8:8f:2f:bc:67:31:cf:3a:e3:ab:22:94:72:93:76:7f:5c: 94:70:7b:96:a6:89:0a:b2:32:ec:40:e9:d8:b4:8e:75:26:21: 48:45:b7:52:9f:ee:a3:ba:45:a9:42:5f:4f:73:f0:8d:ea:17: 0d:c9:75:47:ad:45:37:ab:38:07:63:cc:77:2b:31:9d:c4:b0: fa:94:61:61:cd:ae:f5:26:ef:f7:23:87:f2:86:c3:93:45:90: 93:bc:6b:2e:8d:ee:ac:2d:9b:10:d1:ef:b4:44:3c:f0:ee:79: 39:6b:d7:db:ff:4c:29:38:23:be:ac:86:d7:57:48:2f:47:bb: 1e:07:c3:a7:be:ed:83:35:79:bf:5a:e6:87:44:12:92:16:84: f1:af:4f:3f:51:6e:5a:91:03:0f:ca:4d:0e:4e:e6:00:e0:bd: 56:0d:71:0d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBLswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUJFNTQxMTAvBgNVBAUTKDJEN0NFOTRGMTNEODJFNTRGODM0MjNDNjFFQjk2MzNB Rjk0MDU5MjQwHhcNMjYwMzAxMDAzOTUwWhcNMjYwMzA4MDAzOTUwWjAYMRYwFAYD VQQDDA02OWEzOGFkNi0xNzBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjtwSIzKT1yN4LjxTfd1xWinivxmJphoFh77XbpKhgufj3OZgqecKj2GnFzkw pIgLzLNPFPqRLmdriZ4QVmpZZwTN6GeQffuiLteekZMUc3wrUKmwgvUWo30cGzFL 5UEFijcDZJNS4aV5peIMftucH0uiFv/97STekeJy6QkOzBLuoLLjanabe5XJFOXZ OSljmJCSczu5+6I4Rc7d3R3YDBuaWKJEfbL1FZxhznjtNboo353o9isz9WIFjDOT LA73htPHMKq6cge5zSagoOZwcx/01ONcCexi1slVVpmdfmHoJb4rnqs2lR6KFjgl +C0IWqkpuQqppP/NUzn4POc2TwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAvrNrxi vKAI2N0Y8BjIfsH2QBOSMB8GA1UdIwQYMBaAFC186U8T2C5U+DQjxh65Yzr5QFkk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkU1NC9BNUMxNTBBQzY4 RDYxMUVDQkNENjNDNTRDNEY5QUUwMi9MWHpwVHhQWUxsVDROQ1BHSHJsak92bEFX U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xYenBUeFBZTGxUNE5DUEdIcmxqT3ZsQVdTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QkU1NC9BNUMxNTBBQzY4RDYxMUVDQkNENjNDNTRDNEY5QUUwMi9MWHpwVHhQWUxs VDROQ1BHSHJsak92bEFXU1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIAHsp4U18uNstsvE5/iEErUHX/tRVjMa0eW1EItavU5m1ieDuYNaxr9Pz++Y pEQa6/EWbgjKnui+qpXzInKmw5/PYQ/8hACWHIjRuypSTmx4ZlQ1lJLMVR635aiP L7xnMc8646silHKTdn9clHB7lqaJCrIy7EDp2LSOdSYhSEW3Up/uo7pFqUJfT3Pw jeoXDcl1R61FN6s4B2PMdysxncSw+pRhYc2u9Sbv9yOH8obDk0WQk7xrLo3urC2b ENHvtEQ88O55OWvX2/9MKTgjvqyG11dIL0e7HgfDp77tgzV5v1rmh0QSkhaE8a9P P1FuWpEDD8pNDk7mAOC9Vg1xDQ== -----END CERTIFICATE-----Generated at Sun Mar 1 23:08:10 2026 by rpki-client